$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9b0b2658-bf79-35f3-968a-0e042b83ecdd.roa File: 9b0b2658-bf79-35f3-968a-0e042b83ecdd.roa (raw, json) Hash identifier: 9XCWhbI0qPykoqtMxugx53lWdBflCvqTTusxeNffSQo= Subject key identifier: 94:84:11:2E:10:C3:BD:9B:E7:64:46:09:5A:DA:7F:B2:03:97:E0:8E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EB6E1A6D5B9C7B39C91C47D00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9b0b2658-bf79-35f3-968a-0e042b83ecdd.roa Signing time: Mon 03 Aug 2026 13:00:12 +0000 ROA not before: Mon 03 Aug 2026 13:00:12 +0000 ROA not after: Sun 01 Nov 2026 14:00:12 +0000 asID: 202656 IP address blocks: 206.123.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b6:e1:a6:d5:b9:c7:b3:9c:91:c4:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 3 13:00:12 2026 GMT Not After : Nov 1 14:00:12 2026 GMT Subject: CN=fbb418b3-9b58-4a98-b5a1-67a1566f08f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4c:e0:36:54:5b:b9:4c:7f:db:8c:58:ce:ea: bf:6e:aa:31:a7:dd:d8:aa:45:8e:9d:22:cc:1b:93: 0d:8b:e5:43:5e:c2:24:b4:f3:c3:b0:ff:bf:76:ec: 46:0a:4f:52:5a:db:74:28:ae:b3:52:4b:fa:c0:90: c5:a9:cf:6c:f0:fc:7b:38:f6:c7:79:e3:56:01:5c: 91:48:ff:af:64:38:3c:48:58:28:0b:ef:7b:8a:9d: 9e:2a:29:21:01:0b:68:fe:ef:a2:1d:5a:9d:1c:2f: 97:fb:cc:02:85:75:b8:68:ed:59:e8:43:3c:a5:48: 35:f4:34:9d:fb:9d:f9:12:ea:08:43:6a:71:95:a5: 30:30:30:6e:df:e2:00:fb:07:d1:be:8f:7d:10:53: 8e:a6:7a:19:39:37:ab:17:f2:82:90:26:81:2a:df: 68:8d:e0:40:85:df:66:c1:5d:f2:fa:81:d3:20:3a: 88:3a:9b:a6:16:11:b0:c1:98:bf:86:25:9b:20:57: 0d:e2:7e:09:86:e9:d0:53:20:69:69:f1:77:34:0f: b0:ef:60:78:74:ee:dd:67:7e:6c:04:f3:e0:15:60: 7f:7c:b6:29:b7:6b:02:07:64:17:00:b6:1b:01:ad: f7:a0:0a:6d:37:79:d0:00:52:d8:7e:e8:90:bd:cf: 81:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:84:11:2E:10:C3:BD:9B:E7:64:46:09:5A:DA:7F:B2:03:97:E0:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9b0b2658-bf79-35f3-968a-0e042b83ecdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:d2:42:33:26:91:5c:a3:4d:50:d2:e2:0e:79:e7:ef:87:60: c5:53:25:e2:12:d2:4d:ce:13:bb:5a:4b:23:c4:b6:3d:f4:85: ee:1a:1c:4d:2c:41:0e:c9:b2:44:ec:86:51:21:15:f2:ee:cd: c0:86:21:35:6e:c7:09:d1:ac:db:63:2e:2e:97:67:32:65:01: ce:da:f1:56:82:55:82:e3:f9:40:75:2f:55:8d:52:bf:25:89: b1:2d:44:6d:ad:c2:7a:9d:42:b6:e3:3e:fe:ff:31:33:36:04: 85:7f:3d:da:d1:f7:14:4e:0c:8e:8a:01:38:c4:a7:b6:18:b2: 2c:d7:d6:98:30:b4:0f:48:62:b1:8b:e4:43:ee:7b:91:18:23: 64:5f:1e:fa:a3:75:42:c9:d9:25:13:50:30:07:ab:5a:c1:2a: 20:de:b6:b6:1a:70:5c:b8:60:da:e3:69:a7:0c:80:50:af:63: 28:a1:ed:af:be:a3:86:a0:4e:ae:91:dc:a9:3a:a0:1b:7b:70: 81:7b:06:97:d8:d5:41:24:78:6f:6f:a1:61:a5:2d:b7:e3:ae: 94:de:80:55:14:3a:61:e8:ba:7a:f6:df:73:9d:ab:d0:dd:93: 04:ef:3b:fd:9e:a2:4a:fb:13:61:07:66:f2:05:db:41:4d:07: f9:37:d2:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE624abVuceznJHEfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgwMzEzMDAxMloXDTI2MTEwMTE0MDAxMlowLzEtMCsGA1UEAxMk ZmJiNDE4YjMtOWI1OC00YTk4LWI1YTEtNjdhMTU2NmYwOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUzgNlRbuUx/24xYzuq/bqoxp93YqkWOnSLM G5MNi+VDXsIktPPDsP+/duxGCk9SWtt0KK6zUkv6wJDFqc9s8Px7OPbHeeNWAVyR SP+vZDg8SFgoC+97ip2eKikhAQto/u+iHVqdHC+X+8wChXW4aO1Z6EM8pUg19DSd +535EuoIQ2pxlaUwMDBu3+IA+wfRvo99EFOOpnoZOTerF/KCkCaBKt9ojeBAhd9m wV3y+oHTIDqIOpumFhGwwZi/hiWbIFcN4n4JhunQUyBpafF3NA+w72B4dO7dZ35s BPPgFWB/fLYpt2sCB2QXALYbAa33oAptN3nQAFLYfuiQvc+BmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSEES4Qw72b52RGCVraf7IDl+COMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWIwYjI2NTgtYmY3OS0z NWYzLTk2OGEtMGUwNDJiODNlY2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznueMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTSQjMmkVyjTVDS4g555++HYMVTJeIS0k3OE7taSyPEtj30he4aHE0s QQ7JskTshlEhFfLuzcCGITVuxwnRrNtjLi6XZzJlAc7a8VaCVYLj+UB1L1WNUr8l ibEtRG2twnqdQrbjPv7/MTM2BIV/PdrR9xRODI6KATjEp7YYsizX1pgwtA9IYrGL 5EPue5EYI2RfHvqjdULJ2SUTUDAHq1rBKiDetrYacFy4YNrjaacMgFCvYyih7a++ o4agTq6R3Kk6oBt7cIF7BpfY1UEkeG9voWGlLbfjrpTegFUUOmHounr233Odq9Dd kwTvO/2eokr7E2EHZvIF20FNB/k30tY= -----END CERTIFICATE-----Generated at Fri Sep 4 23:42:29 2026 by rpki-client